009: Polish bacon fixes, OTA host scripts, and migration docs.

Restore disable_configstore, EuiccDisabler and thermal CDEV guards, branding and rebuild/sync helpers; document device roles, laptop migration, and Gitea. Co-authored-by: Cursor <cursoragent@cursor.com>
2026-10-16 21:06:45 +02:00
1 parent 3f941e8451
commit 2d145c2878
@@ -1,55 +1,81 @@
 # Documentation

-Project rules: `.specify/memory/constitution.md`  
-Agent rules: `../AGENTS.md`  
-Feature specs: `../specs/`
+**Active track:** Magisk AXP → LOS 23.2 resurrection (`009`).  
+**Start here:** [`009-handoff-20261008.md`](009-handoff-20261008.md)  
+**Closure baseline (LAB, 2026-10-09):** [`009-closure-parity-20261009.md`](009-closure-parity-20261009.md)

-Conversation continuity: [`chatgpt-context.md`](chatgpt-context.md) — context
-from the shared ChatGPT discussion, reconciled with later repository records;
-non-normative.
+Project rules: `.specify/memory/constitution.md`  
+Agent rules: [`../AGENTS.md`](../AGENTS.md)  
+Feature specs: [`../specs/`](../specs/) (active ship: `009-axp-los23-port`)
+
+KernelSU / ReSukiSU / SusFS (`007`) is a **parallel** track (boot worked Sept
+2026). Keep all `007-*` docs. Bridge to current Magisk ROM:
+[`007-parallel-on-009.md`](007-parallel-on-009.md). Do not mix into Magisk ship
+bacons; A/B or restore Magisk zip after experiments.
+
+## 009 Magisk ship (day-to-day)
+
+| Doc | Role |
+|-----|------|
+| [`009-handoff-20261008.md`](009-handoff-20261008.md) | Resume / execution map |
+| [`009-closure-parity-20261009.md`](009-closure-parity-20261009.md) | Booted closure zip + Swissquote PASS |
+| [`009-magisk-preinstall-runbook.md`](009-magisk-preinstall-runbook.md) | EXTENDROM preroot (Magisk not PRODUCT_PACKAGE) |
+| [`009-capability-matrix.md`](009-capability-matrix.md) | Ship capability matrix |
+| [`009-version-pins.md`](009-version-pins.md) | microG / Magisk / Phonesky pins |
+| [`009-gate-g-kernel-attribution.md`](009-gate-g-kernel-attribution.md) | Kernel hardening attribution |
+| [`009-kernel-hardening-map.md`](009-kernel-hardening-map.md) | Living kernel map |
+| [`009-upstream-rebase-ota.md`](009-upstream-rebase-ota.md) | Next LOS sync → rebacon → first project OTA |
+| [`009-lab-polish-20261016.md`](009-lab-polish-20261016.md) | Post-test polish (configstore, thermal, Euicc, media) |
+| [`009-laptop-migration-20261016.md`](009-laptop-migration-20261016.md) | New laptop / USB bundle, git WT, host bacon in flight |
+| [`009-sideload-system-updates.md`](009-sideload-system-updates.md) | FR-019 APK bumps (stub) |
+| [`009-yuh-golden-lab-hypothesis.md`](009-yuh-golden-lab-hypothesis.md) | Open Yuh gap (historical LAB vs AXP-era GOLDEN) |
+| [`device-roles.md`](device-roles.md) | LAB = daily driver; GOLDEN = our build (debug); AXP oracle = a16 refs |
+
+## Public-facing (users / reviewers)
+
+| Doc | Role |
+|-----|------|
+| [`public/AXP-Resurrection-Pro-sunfish.md`](public/AXP-Resurrection-Pro-sunfish.md) | What the ROM contains — no LAB/GOLDEN/build-host detail |
+| [`public/kernel-cve-backport-list.txt`](public/kernel-cve-backport-list.txt) | **449** kernel CVE identifiers in the ship set |
+
+## Non-normative product trackers
+
+| Doc | Role |
+|------|------|
+| [`axp-pro-parity.md`](axp-pro-parity.md) | Parity matrix — Magisk is ship root on `009` |
+| [`hardening-backlog.md`](hardening-backlog.md) | Candidates until promoted into a `spec.md` |
+| [`a15-a16-delta.md`](a15-a16-delta.md) | Porting notes A15→A16 |
+| [`chatgpt-context.md`](chatgpt-context.md) | Early chat intent; **superseded** by constitution/`009` on root |
+
+## Parallel track — KernelSU / SusFS (kept)
+
+| Doc | Role |
+|-----|------|
+| [`007-parallel-on-009.md`](007-parallel-on-009.md) | How to retry ReSukiSU+SusFS on current `009` ROM |
+| [`007-kernelsu-runbook.md`](007-kernelsu-runbook.md) | Host build / flash runbook |
+| [`007-lab-results-20260916.md`](007-lab-results-20260916.md) | Boot PASS + banks FAIL evidence |
+| `specs/007-kernelsu-sunfish/` | Standby feature spec (FR-016 recycle) |
+
+## Historical diagnostics (not Magisk day-to-day)
+
+See [`archive/README.md`](archive/README.md).
+
+- Sept 2026 fortify / CVE bisect (`009-fortify-*`, `009-cve-bisect-plan.md`)
+- Early lab acceptance / unflashed zip audits
+- Vanilla LOS bring-up done: `003-*` (still useful for `repo sync` basics)

 ## Host boundary

 `rom-dev01` (Ubuntu 24.04, public IPv4, SSH) is provisioned **outside** this
-project (SSYSTEMS Salt `saltenv=base` / PVE). This repository must not specify
-or automate Proxmox VM creation, public IP selection, or company Salt states.
+project. This repository must not specify or automate Proxmox VM creation,
+public IP selection, or company Salt states.

 Feature `001-development-environment` starts from an already-available host.

-## Planned Gitea repositories (on rom-dev01)
+## Reference sources

- `sunfish-a16-rom` — Spec Kit / constitution / docs (meta)
- `sunfish-rom-manifest`
- `sunfish-rom-build`
- `sunfish-rom-patches`
+[`reference-sources.md`](reference-sources.md) — Lineage / AXP / GrapheneOS. **Sunfish only.**

-Plus forks only when modification requires them (kernel, frameworks/base,
-Settings, Dialer, vendor/config).
+## AXP sunfish preservation

-## Reference sources (Lineage / AXP / GrapheneOS)
-
-[`reference-sources.md`](reference-sources.md) — roles, URLs, local vs later
-`rom-dev01` archive work. **Sunfish only.**
-
-## Device roles (two sunfish)
-
-[`device-roles.md`](device-roles.md) — GOLDEN (AXP, do not flash) vs LAB (experiments).
-
-## AXP sunfish preservation (detail)
-
-[`axp-sunfish-preservation.md`](axp-sunfish-preservation.md) — Disroot/Codeberg/
-downloads/Tor cookbook for sunfish-scoped AXP archive. Run after `001` on
-`rom-dev01`. **Not** a full AXP org clone.
-
-## AXP Pro parity
-
-Living matrix (non-normative): [`axp-pro-parity.md`](axp-pro-parity.md).
-
-## Android 15 → 16 developer delta
-
-Living notes for porting AXP/GrapheneOS ideas onto LOS 23.2 without blind copy:
-[`a15-a16-delta.md`](a15-a16-delta.md).
-
-## Hardening backlog
-
-Non-normative candidates: [`hardening-backlog.md`](hardening-backlog.md).
+[`axp-sunfish-preservation.md`](axp-sunfish-preservation.md) — archive cookbook after `001` on `rom-dev01`.